Static task
static1
Behavioral task
behavioral1
Sample
1d662ea2e3d43bac14df7e230ad75e9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d662ea2e3d43bac14df7e230ad75e9e.exe
Resource
win10v2004-20231215-en
General
-
Target
1d662ea2e3d43bac14df7e230ad75e9e
-
Size
31KB
-
MD5
1d662ea2e3d43bac14df7e230ad75e9e
-
SHA1
0490efb449b5750267cf15dbe54f2cfde255e4e0
-
SHA256
ab05e0e9e519d769861cc6e84e4a7ae8ea60c94f378fc9c786a9a6c0861df7f4
-
SHA512
98c66f615ee291336622ab0a4814122c4c15a840a1e1597cf7e4984582758ea6f78601f8b0af5dba762cf3d5cee1afe6c7092f98b0f5fd8028b5d00cd595ce52
-
SSDEEP
768:DVjaBy+G3b5vjYaUzqXgxZvEx4M8f8djBrxXYb1FC6:BjaBxG3b5vjpUzqXgx9EJ8f8NBrJOK6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d662ea2e3d43bac14df7e230ad75e9e
Files
-
1d662ea2e3d43bac14df7e230ad75e9e.exe windows:4 windows x86 arch:x86
bf3132895723e15c3382249685e23069
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 398B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
attach Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE